📦

webmin

Vendor: webmin

Login to add this product to WatchStack
Actively Exploited 1 CISA KEV List
PoC / Exploits 24 Code Available
Total RCEs 17 Remote Access
Total CVEs 261 Total Indexed
Avg. EPSS 9.30% Exploit Prob.
Latest CVE CVE-2026-56022 Jun 18

Security Vulnerability Index

Page 4 / 27
9.8 CVSS
CVE-2022-36446
Exploit Found

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

EPSS: 95.95%
8.8 CVSS
CVE-2022-30708
RCE

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtualmin or Cloudmin). This occurs because settings-editor_write.cgi does not properly restrict the file parameter.

EPSS: 3.83%
8.8 CVSS
CVE-2021-32162
Exploit Found

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature.

EPSS: 2.56%
6.1 CVSS
CVE-2021-32161

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature.

EPSS: 2.00%
6.1 CVSS
CVE-2021-32160

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature.

EPSS: 2.00%
8.8 CVSS
CVE-2021-32159
Exploit Found

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature.

EPSS: 2.31%
6.1 CVSS
CVE-2021-32158

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature.

EPSS: 2.00%
9.6 CVSS
CVE-2021-32157
Exploit Found

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

EPSS: 4.04%
8.8 CVSS
CVE-2021-32156
Exploit Found

A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

EPSS: 2.31%
8.1 CVSS
CVE-2022-0829
Exploit Found

Improper Authorization in GitHub repository webmin/webmin prior to 1.990.

EPSS: 1.30%